CVE-2025-61548 edu Business Solutions CVE debrief

Who should care

Defenders responsible for edu Business Solutions Print Shop Pro WebDesk deployments should assess exposure and apply the vendor's patch due to the critical severity and potential for remote exploitation.

Why it matters

CVE-2025-61548 is a critical SQL Injection vulnerability in edu Business Solutions Print Shop Pro WebDesk version 18.34, allowing remote attackers to execute arbitrary SQL commands. Defenders must verify exposure and apply the vendor's patch to prevent exploitation.

• Remote attackers could execute arbitrary SQL commands, potentially leading to data breaches or system compromise.
• Defenders must verify exposure and apply the vendor's patch to prevent exploitation.
• The critical severity of the vulnerability requires immediate attention from defenders.

Technical summary

The vulnerability is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34. Unsanitized user input is incorporated directly into SQL queries without proper parameterization or escaping, allowing remote attackers to execute arbitrary SQL commands. This critical SQL Injection vulnerability allows remote attackers to execute arbitrary SQL commands, potentially leading to data breaches or system compromise. Defenders must verify exposure and apply the vendor's patch to prevent exploitation.

Defensive priority

Defenders should prioritize verifying exposure and applying the vendor's patch due to the critical severity and potential for remote exploitation.

Recommended defensive actions

• Verify exposure by checking if the affected version of Print Shop Pro WebDesk is in use.
• Apply the vendor's patch to upgrade to version 19.69.
• Implement additional monitoring to detect potential exploitation attempts.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its critical severity and the affected version of Print Shop Pro WebDesk. The vendor has released a fixed version, 19.69. Defenders should verify exposure by checking if the affected version of Print Shop Pro WebDesk is in use and apply the vendor's patch to upgrade to version 19.69. Additional monitoring should be implemented to detect potential exploitation attempts. Evidence is limited to public CVE and NVD information.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.